$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer (raw, json) Hash identifier: Ngjio51ncKQ4X6x5ndZpcJvq/s79a9Rqhsa1hHyfWc4= Subject key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 676B09AEF235B91216F51D73EE86649790AA2F9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft caRepository: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Jan 2024 15:34:23 +0000 Certificate not after: Thu 02 Jan 2025 15:39:23 +0000 Subordinate resources: IP: 103.63.26.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6b:09:ae:f2:35:b9:12:16:f5:1d:73:ee:86:64:97:90:aa:2f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 4 15:34:23 2024 GMT Not After : Jan 2 15:39:23 2025 GMT Subject: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:ac:df:5a:5f:fa:b2:cf:82:9d:36:b1:03: ba:3e:6c:4d:ac:6d:43:e2:76:96:95:49:ae:7a:b0: b0:fd:4e:c1:90:1b:67:ff:f0:e8:02:e0:64:a4:58: 18:fd:0e:c5:2a:34:66:35:6e:0d:c2:11:27:83:6b: 6c:a5:73:f6:62:fe:95:76:d5:23:66:ac:e9:47:b9: 1a:e8:57:a5:f5:be:93:4a:ef:b3:74:c5:bc:89:7f: 54:f1:22:a5:75:6e:bf:e7:04:be:b2:6e:3b:a7:21: c8:64:ef:85:7b:29:25:d0:d8:e2:d5:f1:9a:b1:34: 08:bf:35:0c:7e:94:85:0d:e7:7b:77:87:c7:bc:b0: e0:49:a1:15:59:d9:85:2f:f1:84:9b:54:2c:a4:dd: d6:79:00:78:44:49:60:28:73:72:9e:75:00:e1:0f: 26:c7:2a:18:cf:b5:34:f5:03:85:97:26:5c:c5:70: be:b0:ae:a9:d9:ee:71:4a:f7:f0:60:ca:69:e7:61: 0d:66:27:d0:c9:ef:34:3a:ef:d8:b8:27:a7:a8:1a: ba:92:17:1f:82:cf:6f:75:fd:06:1f:27:71:98:d2: e2:d7:9e:b9:fd:f1:df:0d:b4:d5:cc:6a:ac:e4:97: c6:38:43:95:f4:c4:12:9a:7b:6b:e6:0d:98:60:df: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.63.26.0/24 Signature Algorithm: sha256WithRSAEncryption 57:eb:2f:13:e4:e0:f3:47:3b:2a:a9:a2:28:34:fd:5a:7f:14: 92:3a:d3:39:d2:8c:bd:3d:cd:bf:7e:1c:dc:41:99:38:7c:4b: 06:4c:8e:10:4c:a1:10:05:82:36:48:01:cd:c1:bd:39:2a:33: 1a:ba:fe:32:bf:af:1d:66:5d:4c:ef:b9:f4:65:d0:f7:45:0f: 5f:1d:5e:60:7d:7d:95:f0:ab:47:d9:c5:1a:f4:87:f9:31:e6: ca:65:47:f1:32:1e:db:4a:1c:6a:81:80:8a:bb:d4:7a:84:26: d4:ca:ba:b4:82:e0:09:60:f3:66:9c:83:67:da:00:c5:34:a1: 8a:5e:51:94:aa:f9:78:ab:9c:ce:d8:ff:1a:b8:86:4f:06:2e: b1:50:1a:42:e2:cb:77:78:30:c5:4f:36:41:ac:1b:ff:e2:45: 3f:a4:0b:9b:71:62:2c:79:69:61:63:79:f2:b9:e9:93:0a:20: c6:f6:c3:9d:47:75:09:ab:69:00:73:e3:28:52:b9:df:f3:f8: be:13:69:25:1e:49:02:f7:62:3d:81:67:31:2e:ec:4a:fd:dc: 9c:b2:0f:c8:a1:97:6d:22:45:1f:6f:8b:44:74:02:14:1e:39: cc:b3:c0:08:b3:41:d4:50:83:fd:12:f2:09:9c:c7:e0:1d:02: 86:f8:81:12 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZ2sJrvI1uRIW9R1z7oZkl5CqL58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwNDE1MzQyM1oX DTI1MDEwMjE1MzkyM1owMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FB NTYyMkFEQjM1QzNGOTcyMjcyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALimrN9aX/qyz4KdNrEDuj5sTaxtQ+J2lpVJrnqwsP1OwZAbZ//w6ALgZKRY GP0OxSo0ZjVuDcIRJ4NrbKVz9mL+lXbVI2as6Ue5GuhXpfW+k0rvs3TFvIl/VPEi pXVuv+cEvrJuO6chyGTvhXspJdDY4tXxmrE0CL81DH6UhQ3ne3eHx7yw4EmhFVnZ hS/xhJtULKTd1nkAeERJYChzcp51AOEPJscqGM+1NPUDhZcmXMVwvrCuqdnucUr3 8GDKaedhDWYn0MnvNDrv2Lgnp6gaupIXH4LPb3X9Bh8ncZjS4teeuf3x3w201cxq rOSXxjhDlfTEEpp7a+YNmGDfm2sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKfYPuhwO71ZzcqlYirbNcP5cicoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5YTZjZWFm LWQ2OGMtNGRjYi04MjY3LWZkMWE1M2Q5OTk4OC8wL0E3RDgzRUU4NzAzQkJENTlD RENBQTU2MjJBREIzNUMzRjk3MjI3MjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnPxowDQYJKoZIhvcNAQELBQADggEBAFfrLxPk4PNHOyqpoig0/Vp/FJI60znS jL09zb9+HNxBmTh8SwZMjhBMoRAFgjZIAc3BvTkqMxq6/jK/rx1mXUzvufRl0PdF D18dXmB9fZXwq0fZxRr0h/kx5splR/EyHttKHGqBgIq71HqEJtTKurSC4Alg82ac g2faAMU0oYpeUZSq+XirnM7Y/xq4hk8GLrFQGkLiy3d4MMVPNkGsG//iRT+kC5tx Yix5aWFjefK56ZMKIMb2w51HdQmraQBz4yhSud/z+L4TaSUeSQL3Yj2BZzEu7Er9 3JyyD8ihl20iRR9vi0R0AhQeOcyzwAizQdRQg/0S8gmcx+AdAob4gRI= -----END CERTIFICATE-----Generated at Wed May 8 09:50:35 2024 by rpki-client on console-fra.rpki-client.org